Recommended Free Tools
To create a passkey for a website in Windows 11, sign in to an account on a site that supports passkeys, choose the site’s Create or Save passkey prompt, select where to store the credential, and complete the verification request from Windows Hello, a phone, a password manager, or another provider. The labels and available choices vary by website, browser, device, credential manager, and organization policy.
If the site never offers a passkey option, you generally cannot create one through this Windows flow. Microsoft states: “If you’re not prompted to create or save a passkey when signing in, the website, service or app doesn’t support it at the moment.”
As an Amazon Associate I earn from qualifying purchases.
What you need before creating a passkey
A passkey is a sign-in credential that a compatible website can save through Windows Hello, a synchronized credential manager, a phone or tablet, or a FIDO2-compatible physical security key. You do not need a hardware key: Windows Hello and synced managers are documented alternatives.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallThe account must already exist, and you normally create the passkey from inside that account after signing in. The website has to implement passkey support and expose a registration control. A browser cannot add a passkey to a site that has not enabled the feature.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Supported Windows and browsers
Microsoft’s current support information lists Windows 10 and newer among supported devices but says Windows 11 is needed for the latest passkey features. It lists Microsoft Edge 109 or newer, Google Chrome 109 or newer, and Safari 16 or newer as supported browsers. Those version statements do not mean every browser displays identical menus.
Microsoft Password Manager support is rolling out. The current Microsoft support page identifies it as available in Edge version 142 or newer when you use a personal profile. Work or school profiles can have different controls, and an organization can restrict available passkey options.
| Requirement | What to check | Why it matters |
|---|---|---|
| Windows | Windows 11 is recommended for the newest passkey features. | Some current save and management controls depend on Windows 11. |
| Browser | Use a current version; Microsoft’s listed baselines are Edge 109+, Chrome 109+, or Safari 16+. | Older or unsupported browser builds may not show the registration flow correctly. |
| Website | Look for a passkey, security-key, or passwordless sign-in setting after signing in. | The site must support passkey creation. |
| Verification method | Have Windows Hello, a phone, a credential-manager account, or an optional FIDO2 key ready. | The selected provider must finish the save and verification step. |
| Account access | Know the account’s current sign-in and recovery method. | You should not remove an older credential until another way to recover the account works. |
On a work or school computer, the relevant option can be hidden by policy rather than by a fault in Windows. Microsoft recommends contacting the organization’s IT administrator when a needed option is unavailable on a managed device or account.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How to create a passkey for a website in Windows 11
The website starts the process. Windows 11 supplies storage and verification choices after the site asks for a passkey.
- Update and open a supported browser. Install pending Windows and browser updates, then open the website in the browser you normally use for that account. A current build makes the site’s registration dialog more likely to match the documented flow.
- Sign in to the account. Use the site’s existing password or other sign-in method. Stay on the account for which you want the passkey; creating a passkey while signed in to a different account registers it to the wrong identity.
- Open the site’s passkey setting or respond to its prompt. The control might appear immediately after sign-in, in Security, Account, Sign-in, Passwordless, or a similar area. Microsoft describes the general non-Microsoft flow as creating the passkey when the site prompts you to save one.
- Choose Continue or Create. If the suggested location is acceptable, select Continue or Create. The exact wording is controlled by the site and browser, so do not assume a button labeled Save has to appear.
- Inspect alternatives when necessary. Select Change, Save another way, or the equivalent option if you need a phone, synced manager, security key, or another available location instead of the suggestion.
- Select a save location. Choose from the locations offered by the dialog. The list is configuration-dependent; a phone, key, or manager will not necessarily appear on every PC.
- Complete the provider’s verification request. Windows Hello may ask for your face, fingerprint, or PIN. A phone flow can ask you to scan a QR code and may require Bluetooth pairing. A physical key can require insertion and an on-key action. Follow the prompt shown by the selected provider rather than closing it while it is waiting.
- Wait for the website’s confirmation. The site should report that the passkey was created or show the new credential in its account-security list. If the browser reports a timeout or an error, use the troubleshooting section below before repeating the registration many times.
- Test the recovery path. Sign out only after you know how to use the new passkey and still have another recovery method. A passkey stored only on this PC will not automatically appear on another device.
Microsoft’s detailed procedure and location choices are documented in Create and save a passkey.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Where should the passkey be saved?
The right location depends on how often you change devices, whether you trust a cloud credential provider, and what recovery method you can keep available. There is no single storage choice that Microsoft identifies as best for every user.
| Location | How the setup usually works | Portability and dependency | Important recovery point |
|---|---|---|---|
| Windows Hello on this PC | Select the Windows device option and verify with face recognition, fingerprint, or PIN. | The passkey is stored locally and is bound to that Windows device rather than synchronized automatically. | If the PC is lost or unusable, you need another passkey or account-recovery method. |
| Synced credential manager | Choose the manager shown by the browser or website, then authenticate to that provider. | The manager can make the passkey available on other devices through its cloud account, subject to that provider’s support and policies. | Protect access to the manager account and keep its recovery method current. |
| Phone or tablet | Select the phone or tablet option, scan the displayed QR code when asked, and complete any Bluetooth or authenticator verification. | The phone acts as the provider for the credential; availability depends on the phone and the site’s supported flow. | Keep the phone accessible and maintain a separate way into the website if it is lost. |
| FIDO2-compatible physical security key | Insert or connect the key when the prompt requests it and perform the key’s verification action. | The credential is carried by that hardware key and is not dependent on the Windows PC’s local storage. | Keep a backup sign-in method or an additional key if losing the only key would lock you out. |
Windows Hello: convenient but device-bound
Windows Hello is often the simplest choice when you use one trusted Windows 11 PC. The local passkey is protected by the PC’s available verification method, such as a PIN, face recognition, or fingerprint. Because it is stored on that device, it does not automatically follow you to another computer.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Before relying on a local credential, check that the website offers another recovery route. A replacement laptop cannot use the old laptop’s local passkey merely because you sign in to the same Microsoft account.
Synced credential managers: access across devices
A synchronized manager can make a passkey available on multiple devices through the provider’s account. Microsoft lists its own Password Manager and other synced credential managers as possible choices. Availability is not universal: the manager, browser profile, operating system, and website all have to support the flow.
The Microsoft Password Manager rollout is specifically identified for Edge 142 or newer with a personal profile. A work profile, an older Edge release, or an organization policy can produce a different list of choices.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Phone or tablet: a cross-device option
When the prompt offers a phone or tablet, it may display a QR code for the mobile device to scan. The PC and phone can also need Bluetooth pairing for the verification exchange. Keep both devices nearby until the website confirms registration.
Physical security key: optional hardware
A FIDO2-compatible security key is an optional save location. It is not required to create a passkey in Windows 11, because Microsoft also documents Windows Hello and synced managers. If you choose hardware, treat the key as an account credential: store it safely and arrange another recovery option before it becomes your only way in.
How to find, review, or delete a Windows-stored passkey
Windows provides management controls for passkeys stored locally on the PC. Open Settings > Accounts > Passkeys to view or delete entries. Additional controls are under Settings > Accounts > Passkeys > Advanced options.
These controls apply to the local Windows passkeys that the settings page exposes. A passkey held by a phone, physical key, or separate credential manager is managed through that provider instead. The website may also show a list of registered passkeys in its own account-security page; removing an entry in one place does not necessarily remove every credential registered with the site.
Delete safely
- Open Settings > Accounts > Passkeys.
- Identify the entry you intend to remove rather than deleting an unfamiliar credential.
- Before confirming, verify that another passkey, password, recovery code, or account-recovery method is available.
- Delete the local entry, then check the website’s security settings if you also need to revoke the site’s registration.
Microsoft’s management guidance is available at Manage your saved passkeys. Organization administrators can disable or limit these settings, so a missing delete or advanced-options control may be policy-enforced.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What to do when no passkey prompt appears
The website may not support passkeys
The most direct explanation is that the service has not enabled passkeys for your account, region, edition, or current sign-in flow. Microsoft explicitly says that if you are not prompted to create or save a passkey when signing in, the website, service, or app does not support it at that moment. Look in the account’s security settings for a documented passkey or passwordless option, but do not expect Windows to manufacture one for an unsupported site.
The site may place registration somewhere else
Some sites present the prompt immediately after a successful sign-in; others require opening account security first. Check headings such as Security, Sign-in methods, Passwordless, Two-step verification, or Passkeys. The button can be labeled Add, Create, Register, or Save rather than Passkey.
The browser or Windows build may be outdated
Install pending updates, restart the browser, and retry in a supported browser. Microsoft’s listed browser baselines are Edge 109+, Chrome 109+, and Safari 16+, while Windows 11 provides the latest Windows passkey features. Browser-specific menus can still differ after updating.
An organization may have removed the choice
On a work or school account, administrators can limit passkey options. If a personal account works but the managed account does not, ask IT whether passkeys, external security keys, phone registration, or synchronized managers are permitted. Do not bypass an organization policy by moving company credentials to an unapproved personal manager.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsFixes for setup errors, timeouts, and failed verification
Microsoft lists timeouts, connectivity problems, and account credentials among possible causes of a failed passkey setup or sign-in. Use this order so that you can distinguish a website problem from a provider problem.
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
- Restart the registration from the correct account. Sign out of unrelated accounts or private windows, sign back in to the intended account, and start the site’s passkey flow again.
- Check the network. A disrupted connection can prevent the browser from completing registration. Reconnect before starting another attempt.
- Finish each prompt promptly. A device-verification window can time out. Keep the PC and selected phone or key ready, then complete the PIN, biometric, QR, Bluetooth, or hardware action before the dialog expires.
- Confirm the selected provider. If you chose a phone, use the phone associated with that prompt. If you chose a manager, make sure the correct browser profile is signed in. If you selected Windows Hello, use the Windows account and PIN or biometric method shown by the device.
- Retry after updating. Close stale browser windows, install updates, reopen the site, and repeat the registration once. Repeated attempts can create multiple entries, so check the site’s security list afterward.
- Use another offered location. If local Windows storage fails, a synced manager, phone, or compatible security key may be available. Choosing another location changes where the credential is held; it does not make an unsupported website compatible.
If the website reports success but the browser fails afterward, sign in again using the site’s passkey option and verify which credential the site recognizes. For sign-in-specific diagnostics, see Microsoft’s Troubleshoot signing in with a passkey.
Replacing a computer, phone, or passkey
When you receive a new device, create a replacement passkey before deleting the old one whenever possible. A synced passkey may continue to be available through its credential-manager account, but a Windows Hello credential stored only on the old PC will not transfer automatically.
- Sign in to the website with the existing passkey, password, or recovery method.
- Add a new passkey using the replacement device or another available location.
- Test the new credential in a fresh sign-in session.
- Review the website’s registered passkeys and remove the old device’s entry when you are certain it is no longer needed.
- Remove the old local Windows entry through Settings > Accounts > Passkeys if it still exists.
If the original device is lost before you add a replacement, use the website’s account-recovery process or another registered credential. A local passkey cannot be reconstructed from the Windows settings page on a different PC.
Security and recovery decisions to make before you finish
- Keep a second route in. Maintain another passkey, an approved password, recovery codes, or the site’s documented recovery method before deleting an older credential.
- Know the storage boundary. Local Windows Hello storage is tied to one device; a synced manager is tied to that provider’s account; a phone or hardware key depends on possession of that item.
- Separate personal and managed accounts. Work or school policies can restrict locations and management controls. Follow the organization’s approved method.
- Record which device you used. A clear label in the website’s passkey list makes it easier to revoke a lost laptop, phone, or key.
- Do not assume every prompt is interchangeable. The website, browser, Windows, and credential provider each control part of the flow. A choice visible in one setup may be absent in another without indicating that passkeys are broken.
Frequently encountered questions
Can I create a passkey for any website?
No. The website or service must support passkey registration and present a create or save control. Windows 11 cannot add a passkey to a site that has not implemented the feature.
Is a physical security key required?
No. Microsoft documents Windows Hello, synced credential managers, and phones or tablets as other save locations. A FIDO2-compatible key is an optional alternative.
Will a Windows Hello passkey appear on my next PC?
Not automatically. A Windows Hello passkey saved locally is device-bound. Add another credential or use a supported synced manager if you need access across devices.
Why can a friend see more save options than I can?
Available choices depend on the website, browser, Windows version, device capabilities, credential-manager rollout, account type, and organization policy. Managed work or school devices can intentionally hide options.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →What should I do before deleting my only passkey?
First create and test another sign-in or recovery method. Then remove the old credential from Windows and, when appropriate, from the website’s account-security list.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
